Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/323830343a6536343a3a2f33322d3438203d3e20323632393532.roa
File:                     323830343a6536343a3a2f33322d3438203d3e20323632393532.roa (raw, json)
Hash identifier:          wsSTbiAfImkc/y9gBC6BiGjJ6gXEcAOmjSDc6D3SGlE=
Subject key identifier:   43:21:59:45:82:C0:57:D3:74:1F:49:D6:36:55:81:30:62:D1:BF:02
Certificate issuer:       /CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Certificate serial:       7B3F4E45A20A775C06A8C7BC166A8205A2FC4CFB
Authority key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/323830343a6536343a3a2f33322d3438203d3e20323632393532.roa
Signing time:             Wed 01 Nov 2023 15:00:00 +0000
ROA not before:           Wed 01 Nov 2023 14:55:00 +0000
ROA not after:            Wed 30 Oct 2024 15:00:00 +0000
asID:                     262952
IP address blocks:        2804:e64::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3f:4e:45:a2:0a:77:5c:06:a8:c7:bc:16:6a:82:05:a2:fc:4c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
        Validity
            Not Before: Nov  1 14:55:00 2023 GMT
            Not After : Oct 30 15:00:00 2024 GMT
        Subject: CN=4321594582C057D3741F49D63655813062D1BF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:56:b5:64:d0:7a:7d:4e:2f:7e:5f:93:ec:
                    c3:ce:65:7d:75:7c:0f:e2:3c:db:64:98:4a:04:0c:
                    98:0b:74:54:f3:f2:2b:ad:56:30:b4:9e:7f:fd:5c:
                    f7:4a:f6:e7:bc:82:76:d6:d4:c3:3d:48:cc:a2:77:
                    9e:aa:3b:24:12:e0:a3:ce:42:67:ef:2f:76:da:d5:
                    94:10:4c:17:9e:49:43:27:b9:32:aa:a5:0c:0a:c8:
                    d9:96:07:ce:c4:4b:37:36:de:cb:10:bd:16:52:78:
                    05:f8:38:aa:24:e3:5d:06:4a:ca:63:c5:7b:7c:c3:
                    3c:11:7a:74:b1:75:da:cc:71:66:ec:94:7f:a5:6a:
                    9b:b9:95:a7:88:e3:a7:41:83:3d:fd:27:95:e8:9e:
                    ff:d3:53:81:5a:71:85:e9:97:fc:b0:72:4d:9d:18:
                    d5:99:d0:b5:e9:64:da:a7:c0:82:43:24:cb:b7:9d:
                    ef:47:60:a0:fd:92:d9:2d:33:06:99:7b:e7:a0:97:
                    27:6e:a0:75:67:6f:ea:af:55:a4:f2:7e:97:6c:8f:
                    fd:30:c7:5e:18:94:ab:b3:86:c6:af:f2:91:43:4c:
                    48:4e:e1:04:62:91:6e:76:ca:23:7e:72:f6:09:c2:
                    28:7a:b4:5d:b7:51:07:a0:58:d3:ae:d3:e7:26:7c:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:21:59:45:82:C0:57:D3:74:1F:49:D6:36:55:81:30:62:D1:BF:02
            X509v3 Authority Key Identifier:
                keyid:01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/323830343a6536343a3a2f33322d3438203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:1b:9c:de:56:9c:37:17:d7:1d:59:c3:a7:b8:c0:b8:42:3e:
         77:d5:47:96:88:98:43:54:0c:b8:13:aa:a1:8f:87:08:b4:e2:
         38:b9:ff:28:1a:46:d2:80:ec:32:0e:13:f0:ab:9d:20:8a:ae:
         f5:0a:3e:f3:50:9c:23:a9:df:9c:66:9b:e8:10:b5:da:d0:e7:
         bb:06:40:7e:f0:29:5f:9a:81:a6:0b:00:85:bf:a5:57:52:8a:
         e8:7a:55:43:47:95:c1:d1:cb:8e:2c:20:dc:92:ca:e2:79:14:
         e9:96:2d:0c:77:91:2b:9e:87:88:80:35:0d:2f:e1:44:47:3b:
         d2:0a:27:2b:93:97:24:c9:cb:b1:e0:23:44:ed:f0:b6:df:87:
         ff:8c:a7:2e:0f:e7:71:f4:de:e5:76:ba:f1:81:8e:71:63:58:
         6d:78:53:d5:60:60:d2:ab:eb:83:22:19:6d:30:a8:0d:20:da:
         70:84:64:6c:0f:5d:c2:20:da:57:65:a3:f0:70:5f:b4:b5:46:
         c3:fe:bb:aa:5c:19:5b:b4:6c:b7:06:31:58:1f:5c:d2:d7:84:
         03:53:da:30:72:e3:ec:63:2e:75:17:48:66:2c:3a:78:e2:f7:
         b1:6b:8d:50:ea:b9:b0:30:3f:07:08:35:63:a4:97:42:87:72:
         0a:8f:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org